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DETAILED ACTION 

1. Applicant's Amendment filed 18 January 2008 is acknowledged. 

2. Claims 1, 6, and 16-17 have been amended. 

3. Claims 3-5, 7-8 and 14 are cancelled. 

4. Claims 1- 2, 6, 9-13 and 15-24 are pending In the present application. 

Continued Examination Under 37 CFR 1.114 

5. A request for continued examination under 37 CFR 1 .114, including the fee set 
forth in 37 CFR 1 .17(e), was filed in this application after final rejection. Since this 
application is eligible for continued examination under 37 CFR 1.114, and the fee set 
forth in 37 CFR 1 .17(e) has been timely paid, the finality of the previous Office action 
has been withdrawn pursuant to 37 CFR 1.114. 

Claim Rejections - 35 USC § 101 

6. 35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or 
composition of matter, or any new and useful improvement thereof, may obtain a patent 
therefor, subject to the conditions and requirements of this title. 

Claims 17-24 are rejected under 35 U.S.C. 101 because the claimed invention is 

directed to "a system configured to facilitate...", however the specification, paragraph 

[0018] states "Accordingly, the present invention may take the form of an entirely 
software embodiment . Therefore the system in claim 17 is interpreted as software 
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per se. Software per se is not patentable. Additionally claims 18-24 are dependent on 
claim 17 and do not cure the deficiencies of claim 17 and therefore are rejected under 
101 for the same rationale. 



Claim Rejections - 35 USC § 103 

7. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or 
described as set forth in section 102 of this title, if the differences between the subject 
matter sought to be patented and the prior art are such that the subject matter as a 
whole would have been obvious at the time the invention was made to a person having 
ordinary skill in the art to which said subject matter pertains. Patentability shall not be 
negatived by the manner in which the invention was made. 

The factual inquiries set forth in Graham v. John Deere Co., 383 U.S. 1, 148 USPQ 459 
(1966), that are applied for establishing a background for determining obviousness under 35 
U.S.C. 103(a) are summarized as follows: 

1 . Determining the scope and contents of the prior art. 

2. Ascertaining the differences between the prior art and the claims at issue. 

3. Resolving the level of ordinary skill in the pertinent art. 

4. Considering objective evidence present in the application indicating obviousness 
or nonobviousness. 

This application currently names joint inventors. In considering patentability of the 
claims under 35 U.S.C. 103(a), the examiner presumes that the subject matter of the various 
claims was commonly owned at the time any inventions covered therein were made absent any 
evidence to the contrary. Applicant is advised of the obligation under 37 CFR 1 .56 to point out 
the inventor and invention dates of each claim that was not commonly owned at the time a later 
invention was made in order for the examiner to consider the applicability of 35 U.S.C. 103(c) 
and potential 35 U.S.C. 102(e), (f) or (g) prior art under 35 U.S.C. 103(a). 
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8. Claims 1 , 9-1 0, 1 3, 1 6-1 7, and 22 are rejected under 35 U.S.C. 1 03(a) as being 
unpatentable over Gullotta et al. (US 6985955 B2) in view of Muhlestein et al. (US 
20030195942 A1). 

Consider claims 1 and 16. Gullotta et al. discloses a computer implemented 
method for dynamically provisioning computing resources, said method comprising: 
receiving a request for a computing resource, wherein said request is associated with 
an asset; determining an asset classification of said asset, a business value of said 
asset, and a resource classification related to said asset (column 7 lines 45-52), 
wherein said asset classification is at least one of: a public asset, a business 
confidential asset, a private asset, and a secret asset, wherein said business value of 
said asset is one of: a low value, a medium value, and a high value (column 18 lines 19- 
32), and wherein said resource classification is one of: a trusted classification for 
internal entities and a non-trusted classification for external entities (column 14 lines 3- 
18); and provisioning said computing resource based on said determining step (column 
5 lines 13-35, column 18 lines 34-46, column 1 1 lines 24-52, and column 12 lines 34- 
53). However, Gullotta et al. fails to disclose a computer implemented method for 
dynamically provisioning computing resources wherein an asset is assigned to one of a 
plurality of security domains based on a determining step, wherein each security 
domain corresponds to a respective degree of security control; and provisioning a 
computing resource based on said one of said plurality of security domains. Muhlestein 
et al. discloses a method and apparatus for encapsulating a virtual filer on a filer 
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wherein each vfiler is assigned to a distinct domain (("Specifically, each vfiler is 
allocated a certain amount, i.e., a subset, of dedicated and distinct units of storage 
resources, and one or more dedicated and distinct network addresses. Each vfiler is 
also allowed shared access to the common file system on behalf of its client. Therefore, 
interpretations of a security object associated with, e.g., a client accessing the common 
file system may vary among vfilers. To address this, each vfiler is provided a vfiler 
context data structure (hereinafter "vfiler context") including, among other things, 
information pertaining to a unique and distinct security domain of the vfiler to thereby 
enable controlled access to allocated and shared resources of the vfiler. For example, 
the vfiler context of a first vfiler ensures that users or clients of a first security domain 
can use a first set of source and destination network addresses when issuing requests 
to access a first subset of storage resources on the filer. Similarly, the vfiler context of a 
second vfiler ensures that clients of a second security domain may use a second set of 
source and destination network addresses to access a second subset of storage 
resources. Notably, the clients of each security domain are unaware of each other's 
"presence" on the filer and, further, are unable to access each other's storage 
resources. In sum, no data flow exists between vfilers.") paragraphs 0058-0059). 

Gullotta et al. discloses a prior art computer implemented method for dynamically 
provisioning computing resources, said method comprising: receiving a request for a 
computing resource, wherein said request is associated with an asset; determining an 
asset classification of said asset, a business value of said asset, and a resource 



Application/Control Number: 1 0/71 1 ,433 Page 6 

Art Unit: 2443 

classification related to said asset, wherein said asset classification is at least one of: a 
public asset, a business confidential asset, a private asset, and a secret asset, wherein 
said business value of said asset is one of: a low value, a medium value, and a high 
value, and wherein said resource classification is one of: a trusted classification for 
internal entities and a non-trusted classification for external entities; and provisioning 
said computing resource based on said determining step upon which the claimed 
invention can be seen as an improvement. 

Muhlestein et al. teaches a prior art comparable method and apparatus for 
encapsulating a virtual filer on a filer wherein each vfiler is assigned to a distinct 
domain. 

Thus, the manner of enhancing a particular device (method and apparatus for 
encapsulating a virtual filer on a filer wherein each vfiler is assigned to a distinct 
domain) was made part of the ordinary capabilities of one skilled in the art based upon 
the teaching of such improvement in Muhlestein et al. Accordingly, one of ordinary skill 
in the art would have been capable of applying this known "improvement" technique in 
the same manner to the prior art computer implemented method for dynamically 
provisioning computing resources, said method comprising: receiving a request for a 
computing resource, wherein said request is associated with an asset; determining an 
asset classification of said asset, a business value of said asset, and a resource 
classification related to said asset, wherein said asset classification is at least one of: a 
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public asset, a business confidential asset, a private asset, and a secret asset, wherein 
said business value of said asset is one of: a low value, a medium value, and a high 
value, and wherein said resource classification is one of: a trusted classification for 
internal entities and a non-trusted classification for external entities; and provisioning 
said computing resource based on said determining step of Gullotta et al. and the 
results would have been predictable to one of ordinary skill in the art, namely, one 
skilled in the art would have readily recognized a system and method of virtual 
provisioning. 

Consider claim 17. Gullotta et al. discloses a system configured to facilitate 
dynamically dynamic provisioning of computing resources (column 13 lines 5-18), said 
system comprising including a provisioning engine configured to: receive a request for a 
computing resource, wherein said request is associated with an asset, determine an 
asset classification, a business value of said asset, and a resource classification related 
to said asset based upon input from a manager component, wherein said asset 
classification is at least one of: a public asset, a business confidential asset, a private 
asset, and a secret asset, wherein said business value of said asset is one of: a low 
value, a medium value, and a high value, and wherein said resource classification is 
one of: a trusted classification for internal entities and a non-trusted classification for 
external entities; and internal entities and a non-trusted classification for external 
entities; and provision said computing resource based on said determining step (column 



Application/Control Number: 1 0/71 1 ,433 Page 8 

Art Unit: 2443 

5 lines 13-35, column 18 lines 34-46, column 11 lines 24-52, and column 12 lines 34- 

53) . 

Consider claim 9, as applied to claim 1 . Gullotta et al. discloses a method 
comprising de-provisioning said computing resource (Gullotta et al., column 9 lines 47- 

54) . 

Consider claim 10, as applied to claim 1 . Gullotta et al. discloses a method 

comprising de-provisioning said computing resource when said computing resource is 
no longer needed by said asset (Gullotta et al., column 9 lines 47-54). 

Consider claim 13, as applied to claim 1 . Gullotta et al. discloses a method 

comprising including defining which processes may be suspended if said asset requires 
an additional computing resource (Gullotta et al., column 20 lines 23-31). 

Consider claim 22, as applied to claim 17. Gullotta et al. discloses a method 
comprising including a configuration manager instruction module (Gullotta et al., column 
15 line 60 - column 16 line 8) configured to identify which processes may be suspended 
if an asset requires additional computing resource (Gullotta et al., column 20 lines 23- 
31). 
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9. Claim 2 is rejected under 35 U.S.C. 103(a) as being unpatentable over Gullotta 
et al. (US 6985955 B2) in view of Muhlestein et al. (US 200301 95942 A1 ) and in further 
view of Hartsell et al. (20020174227). 

Consider claim 2, as applied to claim 1 . Gullotta et al., as modified by Muhlestein 
et al., discloses a computer implemented method for dynamically provisioning 
computing resources. However, Gullotta et al., as modified by Muhlestein et al., fails to 
disclose a method including determining a data classification of said asset. Hartsell et 
al. discloses a method including determining a data classification of said asset (("It will 
be understood that in the delivery of differentiated services using the disclosed systems 
and methods, including those illustrated in FIGS. 9A-9D, any packet classification 
technology (e.g., WAN packet classification technology) that is suitable for classifying or 
differentiating packets of data may be employed to enable such delivery of differentiated 
services. Such technologies may be employed to allow the disclosed systems and 
methods to read incoming packet markings/labels representative of one or more policy- 
indicative parameters associated with information management policy (e.g., class 
identification parameters, etc.), to allow the disclosed systems and methods to mark or 
tag outgoing packets with markings/labels representative of one or more policy- 
indicative parameters associated with information management policy, or a combination 
thereof. With regard to packet classification technologies, the disclosed differentiated 
service functionalities may be implemented using principals that are compatible with, or 
that apply to, any suitable types of layer two through layer seven packet classification 
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technologies including, but not limited to, Ethernet 802.1 P/Q, Diffserv, IPv6, MPLS, 
Integrated Services (RSVP, etc.), ATM QoS, etc. In one embodiment, the disclosed 
systems and methods may be advantageously enabled to perform such packet 
classification functionalities by virtue of the presence and functionality of a network 
interface processing engine as is described in relation to FIGS. 1A and 2 herein.") 
paragraph 0281). 

Therefore, it would have been obvious for a person of ordinary skill in the art at 
the time the invention was made to incorporate a method including determining a data 
classification of said asset as taught by Hartsell et al. with a computer implemented 
method for dynamically provisioning computing resources as taught by Gullotta et al., as 
modified by Muhlestein et al., for the purpose of QoS provisioning 

10. Claims 6 is rejected under 35 U.S.C. 103(a) as being unpatentable over Gullotta 
et al. (US 6985955 B2) in view of Muhlestein et al. (US 20030195942 Al) and in further 
view of Steegmans (US 6799216 B2). 

Consider claim 6, as applied to claim 1 . Gullotta et al., as modified by Muhlestein 
et al., discloses a computer implemented method for dynamically provisioning 
computing resources. However, Gullotta et al., as modified by Muhlestein et al., fails to 
disclose a method wherein each security domain respectively includes a different 
degree of security control. Steegmans discloses a method including assigning assets to 
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at least one of a plurality of security domains, wherein each security domain includes a 
different degree of security controls (("It is also advantageous that the domain manager 
manages all the resources required by internet connections within the domain to which 
it is assigned. This permits the dynamic assignment of network resources to users, as 
well as the implementation of security checks and charge metering for these 
resources.") column 2 lines 39-44). 

Therefore, it would have been obvious for a person of ordinary skill in the art at 
the time the invention was made to incorporate a method including assigning assets to 
at least one of a plurality of security domains, wherein each security domain includes a 
different degree of security controls as taught by Steegmans with a computer 
implemented method for dynamically provisioning computing resources as taught by 
Gullotta et al., as modified by Muhlestein et al., for the purpose of dynamic security 
provisioning. 

11. Claim 1 1 and 23 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Gullotta et al. (US 6985955 B2) in view of Muhlestein et al. (US 20030195942 Al) in 
further view of Torres et al. (US 20050043961 Al) and in further view of Benfield et al. 
(US 20030009540 A1). 

Consider claims 11 and 23, as applied to claims 1 and 17, respectively. Gullotta 
et al., as modified by Muhlestein et al., discloses a computer implemented method for 
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dynamically provisioning computing resources. However, Gullotta et al., as modified by 
Muhlestein et a!., fails to disclose a method comprising verifying software of at least one 
of an internal client and external client. Torres et al. discloses a method comprising 
verifying software of at least one of an internal client and external client (("The present 
invention is enterprise software that provides a configurable, plug-and-play solution that 
will search, analyze, and operate on transactional and historical data in real-time across 
remote and disparate databases. The software has the unique ability to discover 
similarities and non-obvious relationships in data in real-time and apply the results of 
data analysis to an operational environment. It has a flexible framework for building a 
variety of applications that can be configured based on application requirements. Using 
an open API, the framework enables organizations to easily incorporate multiple 
technologies, analytics, software components, and both internal and external data 
sources. The system performs tasks such as decision automation, transaction 
processing, and extraction of knowledge from data sources. It can provide the following 
capabilities: search, analyze, and operate on both transactional and historical data in 
remote, disparate databases; uncover non-obvious relationships; find similarities as well 
as exact matches; apply analytical results in an operational environment; easily 
interoperate with other enterprise applications; combine the results from several 
different analytics to produce one comprehensive score; search and process large 
amounts of data in real-time; protect data ownership by using remote search; ensure 
technology investment due to the ability to easily update and expand the system; 
operate in serial and parallel environments; protect privacy by returning scores instead 
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of actual data; operate on data with different data types, piatforms, and formats; 
produce a complete audit trail for all search and analytical results; and quickly and 
easily incorporates multiple analytics, software components, and internal and external 
data sources. The invention enables more accurate and informed decisions; streamlines 
operational processes; increases efficiencies and reduces operational costs; transforms 
data in real-time into useful and useable information; improves customer service and 
customer interaction; and drives more profitable relationships with customers. It may be 
used in business-critical applications including employee background checks, risk 
assessment, fraud detection, data mining, alias identification, market analysis, and 
customer identification. Modular software components provide unique analytical 
capabilities such as link analysis, fuzzy search, similarity scoring and classifications, 
and rules processing as well as a complete decision audit trail. The invention also 
accepts and integrates third party analytics and software components.") paragraph 
0020). Therefore, it would have been obvious for a person of ordinary skill in the art at 
the time the invention was made to incorporate a method including verifying software of 
at least one of an internal client and external client as taught by Torres et al. with a 
computer implemented method for dynamically provisioning computing resources as 
taught by Gullotta et al., as modified by Muhlestein et al., for the purpose of application- 
aware provisioning. However, Gullotta et al., as modified by Muhlestein et al. and Torres 
et al., fails to disclose a method of taking inventory of an internal and an external 
network. Benfield et al. discloses a method of taking inventory of an internal and an 
external network (("While firewalls may prevent certain entities from obtaining 
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information from tlie protected internal network, firewalls may also present a barrier to 
the operation of legitimate, useful processes. For example, in order to ensure a 
predetermined level of service, benevolent processes may need to operate on both the 
external network and the protected internal network; a customer system is more 
efficiently managed if the management software can dynamically detect and 
dynamically configure hardware resources as they are installed, rebooted, etc. Various 
types of discovery processes, status polling, status gathering, etc., may be used to get 
information about the customer's large, dynamic, distributed processing system. This 
information is then used to ensure that quality-of-service guarantees to the customer 
are being fulfilled. However, firewalls might block these system processes, especially 
discovery processes.") paragraph 0202). 

Therefore it would have been obvious to a person of ordinary skill in the art at the 
time the invention was made to incorporate a method of taking inventory of an internal 
and an external network as taught by Benfield with a method including verifying 
software of at least one of an internal client and external client and a computer 
implemented method for dynamically provisioning computing resources as taught by 
Gullotta et al., as modified by Muhlestein et al. and Torres et al., for the purpose of 
identity management. 
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12. Claims 12 and 21 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Gullotta et al. (US 6985955 B2) in view of Muhlestein et al. (US 200301 95942 A1 ) 
and in further view of Oren et al. (US 20030145093 Al ). 



Consider claims 12 and 21, as applied to claims 1 and 17, respectively. Gullotta 
et al., as modified by Muhlestein et al., discloses a computer implemented method for 
dynamically provisioning computing resources. However, Gullotta et al., as modified by 
Muhlestein et al., fails to disclose a method comprising an instruction module configured 
to apply encryption to asset data based on said asset classification. Oren et al. 
discloses a method comprising applying encryption to asset data based on said asset 
classification (("According to optional but preferred embodiments of the present 
invention, system 10 also features an information security system for encrypting and/or 
authenticating classified data defined by the user before transmitting such data from 
peer device 12 of the user. Client module 14 is preferably able to manage renewed sets 
of security keys which are downloaded from central location authority, and particularly 
from a server which acts as the certificate authority of system 10.") paragraph 0083). 

Therefore, it would have been obvious for a person of ordinary skill in the art at 
the time the invention was made to incorporate a method including applying encryption 
to asset data based on said asset classification as taught by Oren et al. with a computer 
implemented method for dynamically provisioning computing resources as taught by 
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Gullotta et al., as modified by Muhlestein et a!., for the purpose of thin provisioning and 
data classification. 



13. Claim 15 is rejected under 35 U.S.C. 103(a) as being unpatentable over Gullotta 
et al. (US 6985955 B2) in view of Muhlestein et al. (US 20030195942 Al) and in further 
view of Grannon (US 2005001 0671 Al ). 

Consider claim 15, as applied to claim 1 . Gullotta et al., as modified by 
Muhlestein et al., discloses a computer implemented method for dynamically 
provisioning computing resources. However, Gullotta et al., as modified by Muhlestein 
et al., fails to disclose a method comprising storing policies regarding processing assets 
when computing resources are limited due to a failure of at least one of software and 
hardware. Grannon discloses a method comprising storing policies regarding 
processing assets when computing resources are limited due to a failure of at least one 
of software and hardware (("For purposes of illustration and example, the MMS software 
1 88 configures itself to be a slave server for redundancy within the premises in 
response to detecting an existing MMS module (namely the MMS software 120) in 
another device (namely the personal computer 110). Thus, while the MMS software 120 
in the personal computer 1 10 is functioning properly and providing server functions, the 
STB 180 functions as an MMC device. However, the STB 180 keeps a copy of media 
asset and device profile tables to account for which media files are stored on all of the 
devices and how associated memory across the devices is allocated. The STB 180 
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keeps the tables in order to tal<e over as the MMS if the personal computer 1 1 0 should 
fail. Also for redundancy purposes, the MMS software 120 can manage data replication 
across multiple devices to ensure that identical pieces of data are stored on different 
devices.") paragraph 0026). 

Therefore, it would have been obvious for a person of ordinary skill in the art at 
the time the invention was made to incorporate a method Including storing policies 
regarding processing assets when computing resources are limited due to failures of at 
least one of software and hardware as taught by Grannon with a computer implemented 
method for dynamically provisioning computing resources as taught by Gullotta et al., as 
modified by Muhlestein et al., for the purpose of application-aware storage. 

14. Claim 18 is rejected under 35 U.S.C. 103(a) as being unpatentable over Gullotta 
et al. (US 6985955 B2) in view of Muhlestein et al. (US 20030195942 Al) and in further 
view of Tredoux et al. (US 20020161904 Al). 

Consider claim 18, as applied to claim 17. Gullotta et al., as modified by 
Muhlestein et al., discloses a computer implemented method for dynamically 
provisioning computing resources. However, Gullotta et al., as modified by Muhlestein 
et al., fails to disclose a system comprising a server configured to communicate with at 
least one of an internal and external client. Tredoux et al. discloses a system comprising 
a server configured to communicate with at least one of an internal and external client 
(("No assumptions need be rendered regarding the network protocol used by the 
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external network device client to communicate with the internal network device and/or 
(hidden) server on the protected network. All network traffic, for example TCP/IP traffic, 
is tunneled by the proxy agent 240 through the exemplary HTTP connection between 
the proxy agent 240 and the external proxy server 250, and there is generally no need 
for them to alter this data, with some notable exceptions. Certain protocols can require 
special treatment, particularly HTTP itself. The use of embedded hyperlinks in HTML 
pages implies that a client may be redirected by a link to an inaccessible URL hidden 
behind the security device/firewall 20, away from the external proxy server 250 which 
enables its access to the hidden network. To prevent or minimize such undesirable 
redirection, a web browser / external device 230 can be configured (through standard 
browser settings) to use the external proxy server 250 as a true HTTP proxy server, 
using the local port on the server described above. This ensures that all HTTP requests 
are forwarded intact and uninterpreted to the external proxy server 250, which passes 
those requests to the proxy agent 240. The agent 240 retrieves the requested URLs, 
which are directly accessible to it since it is behind the firewall 20.") paragraph 0033). 

Therefore, it would have been obvious for a person of ordinary skill in the art at 
the time the invention was made to incorporate a system including a server configured 
to communicate with at least one of an internal and external client as taught by Tredoux 

et al. with a computer implemented method for dynamically provisioning computing 
resources as taught by Gullotta et al., as modified by Muhlestein et al., for the purpose 
of class-based provisioning. 
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15. Claims 19 and 24 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Gullotta et al. (US 6985955 B2) in view of Muhlestein et al. (US 200301 95942 A1 ) 
and in further view of Elliot et al. (US 20020064149 Al). 

Consider claims 19 and 24, as applied to claim 17. Gullotta et al., as modified by 
Muhlestein et al., discloses a computer implemented method for dynamically 
provisioning computing resources. However, Gullotta et a!., as modified by Muhlestein 
et a!., fails to disclose a system comprising a domain database configured to store 
domain rules and policies. Elliot et al. discloses a system comprising a domain 
database configured to store domain rules and policies (("Data recovery of failed 
databases is needed in real time.") paragraph 0757 ("Data Administration (dbAdmin) 
2238 involves setting data policy, managing the logical and physical aspect of the 
databases, and securing and configuring the functional components of the Data 
Management 2138 domain. Data Management policies include security, distribution, 
integrity rules, performance requirements, and control of replications and partitions. 
dbAdmin 2238 includes the physical control of data resources such as establishing data 
locations, allocating physical storage, allocating memory, loading data stores, optimizing 
access paths, and fixing database problems. dbAdmin 2238 also provides for logical 
control of data such as auditing, reconciling, migrating, cataloguing, and converting 
data.") paragraph 1002). 

Therefore, it would have been obvious for a person of ordinary skill in the art at 
the time the invention was made to incorporate a system including a domain database 
configured to store domain rules and policies as taught by Elliot et al. with a computer 
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implemented method for dynamically provisioning computing resources as taught by 
Gullotta et al., as modified by Muhlestein et al., for the purpose of a classification 
database. 

16. Claim 20 is rejected under 35 U.S.C. 103(a) as being unpatentable over Gullotta 
et al. (US 6985955 B2) in view of Muhlestein et al. (US 20030195942 Al) and in further 
view of Baba et al. (US 20060168253 Al). 

Consider claim 20, as applied to claim 17. Gullotta et al., as modified by 
Muhlestein et al., discloses a computer implemented method for dynamically 
provisioning computing resources. However, Gullotta et al., as modified by Muhlestein 
et al., fails to disclose a system comprising a connection manager configured to direct at 
least one of an Internal client and external client to comply with software requirements. 
Baba et al. discloses a system comprising a connection manager configured to direct at 
least one of an internal client and external client to comply with software requirements 
(("An application gateway 110 having a firewall function of limiting accesses from 
devices connected to the external network 120 is provided between the external 
network 1 20 and the Internal network constituted of the home network 1 00. The 
application gateway checks a communication packet in an application layer upon 
receiving an access request from the external network so as to perform filtering.") 
paragraph 0097). 
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Therefore, it would have been obvious for a person of ordinary skill in the art at 
the time the invention was made to incorporate a system including a connection 
manager configured to direct at least one of an internal client and external client to 
comply with software requirements as taught by Baba et al. with a computer 
implemented method for dynamically provisioning computing resources as taught by 
Gullotta et al., as modified by Muhlestein et al., for the purpose of class-based 
provisioning. 

Response to Arguments 

17. Applicant's arguments filed 13 August 2008 with respect to claims 1-2 and 16-17 
have been considered but are moot in view of the new ground(s) of rejection. 

Conclusion 

18. Any response to this Office Action should be faxed to (571 ) 273-8300 or mailed 
to: 

Commissioner for Patents 
P.O. Box 1450 
Alexandria, VA 22313-1450 

Hand-delivered responses should be brought to 

Customer Service Window 
Randolph Building 
401 Dulany Street 
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Alexandria, VA 22314 

Any inquiry concerning tliis communication or earlier communications from the 
Examiner should be directed to Mark Fearer whose telephone number is (571) 270- 
1770. The Examiner can normally be reached on Monday-Thursday from 7:30am to 
5:00pm. 

If attempts to reach the Examiner by telephone are unsuccessful, the Examiner's 
supervisor, Tonia Dollinger can be reached on (571) 272-4170. The fax phone number 
for the organization where this application or proceeding is assigned is (571) 273- 
8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for published 
applications may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through Private PAIR only. For 
more information about the PAIR system, see http://pair-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll-free) or 571-272-4100. 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist/customer service whose telephone 
number is (571)272-2600. 

Mark Fearer 
/M.D.F./ 
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November 13, 2008 
/Tonia LM Dollinger/ 

Supervisory Patent Examiner, Art Unit 2443 



